CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%
A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root user, allowing local users to run ethtraceroute with root privileges. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D240; 17.3 versions prior to 17.3R3-S11, 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1.
Vendor | Product | Version | CPE |
---|---|---|---|
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:* |
juniper | junos | 17.3 | cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:* |
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%